Export limit exceeded: 12586 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 15629 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 51368 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (51368 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-2102 | 2026-11-02 | 6.1 Medium | ||
| wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse() method used the _mimeType request parameter to set the Content-Type response header without proper sanitization. By sending a GET request with _mimeType=text/html, an attacker could cause the browser to interpret a CREST JSON response as HTML, enabling execution of arbitrary JavaScript in the victim's browser. The vulnerability is exploitable by tricking a user into visiting a crafted URL targeting any deployed CREST endpoint. The issue is fixed in versions 22.6.2 and 23.0.0. | ||||
| CVE-2026-105602 | 2026-11-02 | N/A | ||
| Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11. | ||||
| CVE-2026-105601 | 2026-11-02 | N/A | ||
| Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5 | ||||
| CVE-2026-103419 | 2026-11-02 | N/A | ||
| Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11. | ||||
| CVE-2025-12544 | 2026-11-02 | 4.8 Medium | ||
| The Publisher portal fails to enforce proper validation on uploaded SVG files, allowing users with the Publisher role to inject malicious scripts. This weakness can be exploited by uploading a crafted SVG file, which is then stored and rendered by the application. The security consequences include the ability for a malicious actor to redirect the victim's browser to an arbitrary website, modify the web page's UI, or retrieve information from the browser. However, the impact is mitigated as session-related sensitive cookies are protected with the httpOnly flag, preventing session hijacking. | ||||
| CVE-2026-117621 | 2 Jenkins, Jenkins Project | 2 Jenkins, Jenkins | 2026-11-02 | 6.1 Medium |
| Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace browser for each file and directory, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers in control of agent processes. | ||||
| CVE-2026-117622 | 2 Jenkins, Jenkins Project | 2 Jenkins, Jenkins | 2026-11-02 | 6.1 Medium |
| Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers in control of agent processes. | ||||
| CVE-2026-117623 | 2 Jenkins, Jenkins Project | 2 Jenkins, Jenkins | 2026-11-02 | 5.4 Medium |
| Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Read permission. | ||||
| CVE-2026-120500 | 2026-11-02 | 6.1 Medium | ||
| An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.block_code that allows attackers who can edit pages, including anonymous users under the default configuration, to inject arbitrary script. Attackers can place HTML inside a math fenced code block, which is rendered unescaped and executes for every viewer of the page. | ||||
| CVE-2026-87901 | 1 Phpbb | 1 Phpbb | 2026-11-02 | N/A |
| Improper sanitization in the registration module allows reflected Cross-Site Scripting. | ||||
| CVE-2026-37468 | 2026-11-02 | 6.1 Medium | ||
| Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component. | ||||
| CVE-2026-120491 | 1 Wftpserver | 1 Wing Ftp Server | 2026-11-02 | 5.4 Medium |
| Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client users to inject script by sending a crafted nowpath parameter to webclient/makethumb.html. Attackers can break out of the directory CDATA section in admin_get_lastconn.html XML to forge a connection id, which executes in administrators' browsers when admin_connection_list.html auto-refreshes, enabling Lua console abuse. | ||||
| CVE-2026-117539 | 2 Darylldoyle, Svg-sanitizer Project | 2 Svg-sanitizer, Svg-sanitizer | 2026-11-02 | 3.5 Low |
| darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url() values, or image href attributes to exfiltrate page data, track users, or disclose visitor IP addresses. | ||||
| CVE-2026-117535 | 1 Redaxo | 2 Core, Redaxo | 2026-11-02 | 6.1 Medium |
| REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media pool detail page, where the opener_link parameter is rendered without HTML escaping. Unauthenticated attackers can lure logged-in backend users with media permissions into clicking a crafted link. The injected script can then read the CSRF token and perform actions with the victim's permissions, including code execution via template or module edits when the victim is an administrator. | ||||
| CVE-2026-102786 | 2026-11-02 | N/A | ||
| Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5 | ||||
| CVE-2026-120205 | 1 Thelia | 1 Thelia | 2026-11-02 | 8 High |
| Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to inject scripts via unescaped customer names. Attackers can register with a script payload as their name that executes when administrators view related coupons, stealing CSRF tokens to create administrator accounts. | ||||
| CVE-2026-120488 | 1 Laradashboard | 1 Lara Dashboard | 2026-11-02 | 5.4 Medium |
| LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows authenticated users with post.create or post.edit permission to inject scripts via unsanitized LaraBuilder design_json block content. Attackers can save text-editor, HTML, text or heading blocks containing script or event-handler markup that executes in administrator or Superadmin sessions viewing the builder, preview or page. | ||||
| CVE-2026-120443 | 2026-11-02 | 6.1 Medium | ||
| GoFound through 1.4.1 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts by submitting document text to /api/index. Attackers can index malicious HTML that searcher/engine.go returns unescaped and dashboard.vue renders with v-html, executing script in an administrator's browser when an admin search matches the document. | ||||
| CVE-2026-120428 | 2026-11-02 | 6.1 Medium | ||
| PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to upload HTML files with image extensions via /share/v1/common/file/upload. Attackers can lure administrators to /static-file/<key>?a=.pdf, bypassing the nginx attachment header to serve HTML inline and steal the panda_wiki_token JWT for session takeover. | ||||
| CVE-2026-115993 | 1 Cervantessec | 1 Cervantes | 2026-11-02 | 6.8 Medium |
| Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges | ||||